Cybersecurity

Job Description

• Configures and maintains cloud infrastructure including objects/resources, network components, role assignments, system availability, performance tuning, configuration and installation of solutions and improvements.
• Maintains cloud environment security using CSPM and CNAPP tools.
• Troubleshoots system technical issues.
• Utilizes Power Shell and/or Azure CLI scripting languages to create, delete and manage users, service accounts, role assignments and data objects in Active Directory and Entra .
• Supports and assists in DNS management.
• Assigns and manages PIM roles and assignments for privileged identities.
• Manages Tier 0 / global admin access via users, groups, and PAW hardware devices.
• Work with Dev Ops teams to maintain security of the development pipelines.
• Assists in Azure Policy definition and assignment in relation to user roles and access.
• Configures and monitors internal SSL Certificates.
• Configures and monitors external URL redirects.
• Assist broader Infrastructure Protection team – knowledge of firewalls, network traffic, user connectivity, email and web protection a plus.

Note: a video interview through Microsoft Teams will be required as well as potential onsite interviews and meetings.

We are committed to offering flexible work options where approved and stated in the job posting. However, we are currently not considering candidates who reside or plan to reside in the following states:
California, Connecticut, Hawaii, Illinois, New York, Rhode Island, Vermont, and Washington.

• Technical configuration, engineering, management and monitoring

• Risk analysis, corrective action planning, policy development

• Cyber threat monitoring, prevention, remediation and incident response

• Policy, procedure and guidance development

• Architectural design, standards and documentation

• Server administration and scripting

• Data compiling, analytics and reporting

• Cloud operations, cloud security and Dev Sec Ops

• Automation principles and how they can be applied in IT environments

• Conducts core incident and task management work for the delivery of cybersecurity services Acts as a primary member for project delivery tasks Knowledgeable of Cybersecurity industry practices Understands detailed IT principles and processes, such as networking, service management, ITIL and applications Receives and responds to incoming calls, pages and/or e-mails.

• Schedules and performs improvements, upgrades and repairs as assigned.

• Operational and Incident Response teams participate in 24/7 on-call rotation or work in a swing/night shift rotation

• Communication
• Time management
• Accountability
• Reliability
• Professionalism
• Collaboration
• Critical thinking
• Problem solving
• Knowledgeable of cybersecurity technologies and information systems

• Bachelor’s degree through an accredited institution or entry level cybersecurity certification, such as Security+ 3-5 years of related work experience.
• Knowledgeable experience in cybersecurity technologies, systems and processes.
• Troubleshooting skills.
• Working skills in analysis, attention to detail, problem resolution, judgment, and decision-making.
• Working communication, presentation, and collaboration skills.

• Intermediate level certifications, such as SANS (GSEC, GPEN, GCIH, etc), CISA, or CISM.
• Working understanding of information security related regulations, such as HIPAA Privacy and Security, PCI-DSS.
• Depending on the roles focus:
• Working understanding of attestation and certification methodologies, such as SOC
  2.
• Working knowledge of scripting.
• Working understanding of cybersecurity assessment tools/techniques.
• Azure or other public cloud management.
• Cloud security including CSPM/CNAPP and cloud policy.
• Entra /roles/assignments including PIM / privileged identity management.
• IaaS / PaaS.
• SSL certificates.
• URL redirects.
• Firewall, networking, user connectivity, email and web protection.

• Interact with others requiring the employee to communicate information.
• Operate computers and other IT equipment requiring the ability to move fingers and hands.
• See and read computer monitors and documents.
• Remain sitting or standing for long periods of time…